Privacy Policy

Posted on

Thank you for visiting our website. We attach great importance to ensuring that we are compliant with data protection regulations. The aim of this Privacy Policy is to provide you, the user of this website, with information about the nature, extent and purpose of the processing of personal data and about your rights as the data subject within the meaning of Article 4 no. 1 of the EUʼs General Data Protection Regulation (GDPR). This Privacy Policy takes account of the amendments to the GDPR which entered into effect on 25 May 2018.

1. Controller responsible for data processing

This website and the services offered on it are operated by:

VDI Zentrum Ressourceneffizienz GmbH
(hereinafter ‟VDI ZRE”)
Bertolt-Brecht-Platz 3
10117 Berlin
Germany

Tel.: +49 30 2759506 0
Email: zre-redaktion[at]vdi.de
Website: www.ressource-deutschland.de

Managing Director: Dr Martin Vogt

2. General information

Our goal when developing this website was to ensure that we collect as little of your data as possible. You can, in principle, visit our website without having to provide us with any personal data. We always ensure that any processing of your personal data complies with the applicable legislation or is based on your explicit consent. We apply the rules set out in the GDPR which entered into effect on 25 May 2018 as well as the relevant domestic legislation, including the Federal Data Protection Act, the Telemedia Act and other more specialized laws.

3. Definitions

In compliance with the GDPR, the following definitions apply for the purposes of this Privacy Policy:

‟Personal data” means any information relating to an identified or identifiable natural person (‟data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

‟Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;

Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

‟Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subjectʼs wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

4. Processing of personal data: purpose and legal basis

Your personal data are always processed for a specific purpose. In sum, we process your personal data for the following purposes:

  • to contact interested individuals on general matters
  • to monitor the activities of the VDI ZRE in regard to the provision of general information
  • for the technical implementation of our website and to be able to provide you with information about the VDI ZRE on this website (e.g. IP address, cookies, browser information)

The specific purposes are described in the relevant sections below (e.g. regarding web analysis).

The following applies with regard to the legal basis for the processing of your personal data:

Your data are processed for the purposes of pursuing our legitimate interests within the meaning of point (f) of Article 6(1) of the GDPR, except where these are overridden by your interests or fundamental rights and freedoms in relation to the processing of personal data. Where we task external service providers with the data processing, your personal data are processed on the basis of Article 28 of the GDPR.

5. Collection of personal data

When you use our website merely for informational purposes, that is if you do not register or transmit information for another reason, we only collect those personal data which your browser transmits to our server. Whenever you view content on our website, we collect the following data for technical reasons so as to be able to display our website and to ensure its stability and security (the legal basis being point (f) of Article 6(1) GDPR):

  • IP address
  • date and time of request
  • time zone difference to Greenwich Mean Time (GMT)
  • content of page requested (specific page)
  • access status/HTTP status code
  • data volume transmitted in each instance
  • website making request
  • browser
  • operating system and interface
  • browser software language and version

In addition to the aforementioned data, your computer system also stores cookies whenever you use our website. For more information, please refer to the section 6. (Cookies) in this Privacy Policy.

6. Cookies

Use of cookies

Our website collects and stores information using browser cookies.

What are cookies?

Cookies are small text files which are stored on your medium and save certain settings and data which your browser shares with our system. A cookie generally contains the name of the domain from which the cookie data were sent, information about the age of the cookie and an alphanumerical identifier.

Why do we use cookies?

Cookies enable our systems to recognize a userʼs device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive on the userʼs device. Cookies help us to improve our website and to offer you a better, tailor-made service. They enable us to identify your computer or (mobile) device if you return to our website as well as

  • to store information about your preferred activities on our website and to gear our website to your specific interests
  • to speed up the processing of your requests.

We cooperate with third-party providers which support us in making our website and the services we offer on it more interesting for you. That is why these partner companiesʼ (third-party providersʼ) cookies are stored on your hard drive when you visit our website. These cookies are automatically deleted after a specified period.

The table below lists all the cookies we use:

Cookie name First-party or third-party cookie?

In the case of third-party cookies: who is responsible?

Description/function  

Expires after

_pk_ses.9.bc07 First-party Piwik/Matomo
Deliver anonymized data for an analysis so as to be able to improve the website
30 minutes
_pk_id.9.bc07 First-party 13 months
_pk_ref.9.bc07 First-party 6 months
cookieconsent_status First-party Keeps track of userʼs choice to use or not use cookies 1 year
_ga First-party Google Analytics
Serves to distinguish between visitors
2 years
_gat First-party Google Analytics
Used to slow down the query rate
1 minute
_gid First-party Google Analytics
Used to store the session ID and group each userʼs overall session activity
1 day
NID Google Transmits preferred settings 6 months
1P_JAR Google To optimize advertising 1 month
CONSENT Google Term 20 years? 20 years
IDE DoubleClick To register and report user activity on the website after being displayed or after user clicks on a providerʼs ad 13 months
test_cookie DoubleClick Session
GPS youtube.com Registers a unique ID on mobile devices to enable tracking based on geographical GPS location 37 minutes
PREF youtube.com Tracks user preferences and makes related content or ads available in an embedded YouTube video 2 years
VISITOR_INFO1_LIVE youtube.com Attempts to measure user bandwidth on sites with integrated YouTube videos 6 months
YSC youtube.com Registers a unique ID to keep statistics on YouTube videos the user has viewed End of session
remote_sid youtube.com Cookie technology for embedded YouTube videos Session
nextld youtube.com Linked to embedded YouTube videos and help to track the number of times a video is viewed as well as other activities and settings Session
requests youtube.com Session

Can I decide whether or not cookies are used?

Should you not wish browser cookies to be used, you can set your browser to not accept cookies. Please note, however, that if you do so, then you may not be able to use all the features on our website. If you only wish to accept our own cookies but not those of our service providers or partners, please select ‟Block third-party cookies” in your browser. We accept no responsibility for the use of third-party cookies.

7. How to contact us

There are various ways in which you can contact us. When you contact us, we will store the personal data you transmit to us so as to be able to process all general external enquiries sent to the VDI ZRE by email using its publicly available email address. The purpose of this data processing is to be able to handle each contact request and all communications resulting from it.

Our legitimate interest within the meaning of point (f) of Article 6(1) of the GDPR forms the legal basis for the data processing when responding to contact requests. Only an email address and the content of the email are required to be able to deal with a request. Should you wish to, you can also transmit your first name and family name for the same purpose and so that you can be addressed by name. The retention period for personal data for the aforementioned purposes is first and foremost determined by the duration of the communications with the VDI ZRE resulting from your contact request.

8. Third-party services and content

Our website uses the content, services and deliverables of other providers. They include services relating to the statistical analysis of website use and visits or to the embedding of videos and maps, for instance YouTube and Google Maps. Providers (‟third-party providers”) are aware of each userʼs IP address. Although we make every effort only to use third-party providers which need an IP address solely in order to be able to deliver content, we have no influence on whether or not that IP address is stored. This then serves statistical purposes, for instance. Should we learn that the IP address is in fact stored, we will inform you of that fact.

Use of Matomo (formerly Piwik)

Our website uses the open source web analytics software Matomo.

Matomo uses cookies. Cookies are small text files which your browser stores on your device, enabling an analysis of the use of our website. The information about the use of our website which is generated using cookies is then stored on our server. Your IP address is anonymized prior to storage. Cookies generated by Matomo remain on your device until you delete them. Point (f) of Article 6(1) of the GDPR serves as the legal basis for the setting of Matomo cookies. As the operator of this website we have a legitimate interest in carrying out anonymized analyses of user behaviour in order to optimize both our website and, possibly, also advertising.

The information concerning the use of this website which is stored in the Matomo cookie is not disclosed to others. You can set your browser to not accept cookies. However, you may then no longer be able to use all of the features on our website.

You can prevent the storage and use of your data. Your browser sets an opt-out cookie which prevents Matomo storing user data. Whenever you delete your cookies, the Matomo opt-out cookie will also be deleted. When you next visit our website you will then have to once more set the opt-out cookie not to store and use your data (https://matomo.org/docs/privacy/).

Use of Google Tag Manager

Our website uses Google Tag Manager, which enables website tags to be administered via the interface. Google Tool Manager only implements tags. That means that no cookies are set and no personal data are collected. Google Tool Manager triggers the creation of other tags which may, in turn, record data. However, Google Tag Manager does not access these data. If you have blocked Google Tag Manager at the domain or cookie level, the blocking applies to all tracking tags which are implemented by Google Tag Manager. Blocking Google Tag Manager at the domain or cookie level continues to apply to all tracking tags implemented by Google Tag Manager. To read Googleʼs Privacy Policy, go to: https://policies.google.com/privacy/partners?hl=de.

Google LLC is certified for the EU–US Privacy Shield. This data protection agreement aims to guarantee the same level of data protection as is applicable within the EU.

Use of YouTube

Our website uses YouTube plugins in order to be able to embed and display video content. YouTube is operated by Google LLC. The provider of the video portal is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you access a page with an integrated YouTube plugin, a connection is established to YouTubeʼs servers. YouTube then knows which of our websites you have called up.

YouTube can directly link your surfing behaviour to your personal profile if you are logged in to your YouTube account. You can prevent this occurring by first logging out of your account.

We use YouTube in the interests of presenting our online services in a visually appealing way. This represents a legitimate interest within the meaning of point (f) of Article 6(1) of the GDPR.

For details on how user data are handled, please consult YouTube’s Privacy Policy: https://www.google.de/intl/de/policies/privacy.

Use of Google Maps

Our website uses Google Maps to incorporate and display map content. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Whenever you access a page with an embedded map provided by Google Maps your IP address will be recorded. This information is generally transmitted to and stored on one of Googleʼs servers in the United States. Google then knows your IP address, even if you have no user account which you have logged in to. If you are logged in to your user account, Google can directly link your surfing behaviour to your personal profile. You can prevent this occurring by first logging out of your account. The provider of this page has no influence on this data transmission.

We use Google Maps in the interests of presenting our online services in a visually appealing way and to ensure that the places we cite on our website are easy to find. This represents a legitimate interest within the meaning of point (f) of Article 6(1) of the GDPR.

For details on how user data are handled, please consult Googleʼs Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

Use of Google Analytics

Our website uses functions provided by the web analytics service Google Analytics. The provider of this web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. Cookies are small text files which your browser stores on your device, enabling an analysis of the use of our website. The information about how you use our website which is generated using cookies is then transmitted to and stored on one of Googleʼs servers, which, as a rule, will be located in the United States.

Point (f) of Article 6(1) of the GDPR represents the legal basis for the setting of Google Analytics cookies. As the operator of this website we have a legitimate interest in carrying out anonymized analyses of user behaviour in order to optimize both our website and, possibly, also advertising.

We use Google Analytics in connection with IP anonymization. This guarantees that Google abbreviates your IP address within the Member States of the European Union or other Contracting States to the Agreement on the European Economic Area prior to transmission to the United States. There may be exceptional cases in which Google transmits the full IP address to a server in the United States and then abbreviates it there. Google will use this information on our behalf to analyse your use of our website, to compile reports on website activity and to provide other services to us which are linked to website and internet use. The IP addresses which Google Analytics transmits are not combined with other Google data.

You can set your browser to not use cookies. However, if you do so, you may no longer be able to use all the features on our website. You can also prevent data regarding your use of our website, including your IP address, being recorded, including subsequent processing by Google. To do so, download and install the browser plugin available by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For details on how Google Analytics handles user data, please consult Googleʼs Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded a contract with Google concerning such processing in order to fully comply with statutory data protection requirements.

Alternatively, you can also prevent Google Analytics recording data by setting an opt-out cookie. To do so, click >here<. Whenever you delete cookies on your browser, you will have to click on the link again.

To read Googleʼs Privacy Policy, go to: https://policies.google.com/privacy/partners?hl=de.

Use of DoubleClick

Our website uses Googleʼs online marketing tool DoubleClick. The provider of this tool is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

DoubleClick uses cookies to display user-relevant ads, to optimize performance reports and to avoid users seeing the same advertisements multiple times. Cookies are small text files which your browser stores on your device. Google uses a cookie ID to record which ads are displayed in which browser and to prevent these being displayed on multiple occasions. The optimal marketing of our website represents a legitimate interest within the meaning of point (f) of Article 6(1) of the GDPR.

Cookie IDs also help DoubleClick to record conversations linked to ad requests. An example of this is when you see a DoubleClick ad and then later make a purchase on the advertiserʼs website using the same browser. According to Google, DoubleClick cookies store no information which can be attributed to a specific data subject.

Because we use these marketing tools, your browser automatically establishes a direct link to Googleʼs server. We have no influence on the extent and use of the data which Googleʼs tool collects. As far as we are aware at this point in time, Google learns, via DoubleClick, which areas of our website you have visited and which of our ads you have clicked on. Should you be logged in to your Google account, Google can establish a link between your visit to our website and your account. It cannot be ruled out that Google identifies and stores your IP address even if you are not logged in.

A modern web browser enables you to monitor, restrict and block the setting of cookies. You can object to the tracking process. By blocking cookies you may, however, no longer be able to use all the features on our website.

Google is certified for the EU–US Privacy Shield. This data protection agreement aims to guarantee the same level of data protection as is applicable within the EU.

For details of DoubleClickʼs Privacy Policy, go to: http://www.google.de/policies/privacy/.

Use of Google Web Fonts

Our website uses Google Web Fonts. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Using these web fonts enables us to display our website in the design of our choosing, regardless of which fonts are available locally on your device. When you visit our website, Google Web Fonts is called up on one of Googleʼs servers in the United States, which means that your data (IP address and page visited) are disclosed to Google. Point (f) of Article 6(1) of the GDPR represents the legal basis for the use of Google Web Fonts. As the operator of this website we have a legitimate interest in the optimum presentation and transmission of our website.

Google is certified for the EU–US Privacy Shield. This data protection agreement aims to guarantee the same level of data protection as is applicable within the EU.

For details about Google Web Fonts, please visit: https://www.google.com/fonts#AboutPlace:about. For further information, please consult Googleʼs Privacy Policy: https://policies.google.com/privacy/partners?hl=de.

9. Social media

Our web pages display social buttons which create a static link to the VDI ZREʼs social media platforms. They do not establish a direct link to the respective providers.

10. Rights of the data subject

You have the right

  • under Article 15 of the GDPR to obtain confirmation as to whether or not we are processing personal data relating to you. More specifically, you have the right to information about the purposes for which your personal data are being processed; the category of personal data being processed; the categories of recipients to whom your personal data have been or will be disclosed; the envisaged period for which your personal data will be stored; the existence of the right to request correction or erasure of your personal data or restriction of the processing or to object to such processing; the right to lodge a complaint; where the personal data are not collected from the data subject, information as to their source; and the existence of automated decision-making, including profiling and, possibly, meaningful information about the logic involved;
  • under Article 16 of the GDPR to obtain the immediate rectification and/or completion of incorrect or incomplete personal data concerning you;
  • under Article 17 of the GDPR to the erasure of personal data concerning you which we have stored, unless they are required for the purposes of the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, on the grounds of a public interest or the establishment, exercise or defence of legal claims;
  • under Article 18 of the GDPR to obtain restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose the erasure and we no longer require the data but you require them for the establishment, exercise or defence of legal claims or you object to the processing in accordance with Article 21 of the GDPR;
  • under Article 20 of the GDPR to data portability, that is the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to have these transmitted to another controller;
  • under Article 7(3) of the GDPR to withdraw your consent at any time. The consequence of withdrawal of consent is that we will in future no longer process those data on which the consent is based; and
  • under Article 77 of the GDPR to lodge a complaint with a supervisory authority. You will usually be able to turn to the supervisory authority of your habitual residence, place of work or seat of our company.
  • Right to object

In so far as your personal data are processed on the basis of a legitimate interest pursuant to point (f) of Article 6(1) of the GDPR, you have the right, under Article 21 of the GDPR, to object to the processing of your personal data where grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case you have the general right to object, which we will implement without you needing to cite any specific situation.

Should you wish to make use of your right to withdraw consent or to object, simply send an email to: datenschutz@vdi-zre.de.

11. Disclosure of personal data

Your personal data are disclosed as described in the following.

Our website is hosted by an external service provider based in Germany. This ensures that your data are processed within the European Economic Area. This is necessary in order to be able to operate the website and for the establishment, implementation and execution of the existing user contract. Your consent is not required.

Your data are disclosed where we are authorized or obliged on the basis of statutory provisions and/or official or court orders to pass on those data. This may, in particular, occur in the context of a criminal prosecution, to avert a threat or assert intellectual property rights.

Where the required data are transmitted to a service provider, the provider will only have access to your personal data to the extent necessary in the fulfilment of its tasks. The service provider is under the obligation to comply with data protection legislation, in particular the GDPR, when handling your personal data.

Over and above the aforementioned situations, we will not transmit any of your data to third parties without your consent. In particular, we will not transfer personal data to any offices in third countries or to any international organizations.

12. Retention period

Unless stated otherwise, processed personal data will always be deleted as soon as they are no longer required to fulfil the original purpose and no statutory retention period applies. Ultimately, the period for which your personal data will be stored is dictated by which statutory retention period applies. After the end of the respective period the relevant data are routinely deleted. Where statutory retention obligations apply, processing is restricted by means of blocking the data.

13. References and links

When you call up websites to which we refer on our own website you may be requested to provide information such as your name, address, email address, browser features etc. again. This Privacy Policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third-party service providers may apply their own, different rules to the collection, processing and use of personal data. We therefore advise that you visit such third-party websites before entering personal data to find out how they handle personal data.

14. Changes to this Privacy Policy

We continuously develop our website so as to be able to keep improving our services. We will keep this Privacy Policy updated and will adapt it if and to the extent necessary.

We will, naturally, inform you in good time of any changes to this Privacy Policy by sending an email to the email address you have notified us of. Should further consent be required for us to be permitted to process your data, we will of course obtain your consent before the relevant changes take effect. You can access the current version of our Privacy Policy at any time at Data Protection.

15. Data protection officer

We have appointed a data protection officer:

Stephan Schollmeyer
www.mein-datenschutzbeauftragter.de
Hafenstraße 1a
23568 Lübeck

Email: datenschutz[at]vdi-zre.de

As at: July 2018